Question
A web application accepts a valid ID token in place of an access token when calling its data API. Users can sign in, but the design cannot reliably enforce API scopes. What is the correct fix?
Flashcard practice
Practice multiple choice certification questions for Microsoft 365 Certified: Copilot and Agent Administration Fundamentals (AB-900) and review the explanation after each answer.
A web application accepts a valid ID token in place of an access token when calling its data API. Users can sign in, but the design cannot reliably enforce API scopes. What is the correct fix?
Read aloud starts automatically.
Guest checks show correctness and the answer key. Log in to save history and unlock evaluator notes.
i Review the explanation and try similar questions to strengthen your understanding.
Issue reporting
Clara
Search across lessons, syllabus topics, provider capabilities, and certification questions.